Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual

Also see for Certificate Management System 6.0: Installation and setup guide Manual Manual Manual

Contents

Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual Manual pdf 34 page image

How the Tool Works34 Netscape Certificate Management System Command-Line Tools Guide • March 2002The output also contains the status of each entry in the directory. It can be one ofthe values specified in Table 4-1.If a PIN already exists for a user, it will by default not be changed if you run thesetpin command a second time. This is so that you can generate PINs for newusers without overwriting PINs for users who have previously been notified oftheir PINs. If you want to overwrite a PIN, you should use the clobber option.Once you are sure that the filter is matching the right users, you should run thesetpin command again with the write option, and with output set to the name ofthe file to capture the unhashed PINs. This output file is in the same format as theinput file. For details about the output file, see “Output File” on page 36.Input FileThe PIN Generator can receive a list of DNs to modify in a text file specified by theinput= argument. If you specify an input file, the tool compares theDNs it filtered from the LDAP directory with the ones in the input file, and updatesonly those DNs that matched the ones in the input file.The purpose of the input file is multifold. It enables you to provide the PinGenerator with an exact list of DNs to modify. Via the input file, you can alsoprovide the PIN Generator with PINs (in plain text format) for all DNs or forspecific DNs.The following examples explain why you might want to use the input file:Table 4-1 PIN Generator statusExit code Descriptionnotwritten Specifies that the PINs were not written to the directory, because the writeoption was not specified on the command line.writefailed Specifies that the tool made an attempt to modify the directory, but the writeoperation was unsuccessful.added Specifies that the tool added the new PIN to directory successfully.replaced Specifies that the tool replaced an old PIN with a new one (the clobber optionwas specified).notreplaced Specifies that the tool did not replace the old PIN with a new one (the clobberoption was not specified).